Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
Are the PSM JNLP session vulnerable to CVE-2007-3655?
Description
Are the 2.5.916 PSM Sessions (that are created using JNLP) vulnerable to CVE-3005-3655?
Resolution
JNLP would only be vulnerable if the workstation utilizing PSM is running an older version of Java:
Java Runtime Environment 6 update 1
Java Runtime Environment 5 update 11
CVE-2007-3655 is a client side vulnerability. Ensure that the Java installed on the workstations initiating PSM is current. The TPAM Release Notes for TPAM 2.5.916 (current at this time) indicate that the required version of Java is 7.0.45 or higher.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Recommended Content
Product(s):
TPAM
2.5.916, 2.5.915, 2.5.914
Topic(s):
Configuration
Article History:
Created on: 8/26/2016 Last Update on: 5/7/2023
Thank you for your feedback for Topic Request
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to One Identity Support
You can find online support help for*product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
The One Identity Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.